Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[stable9] Exclude more invalid chars from files UI path #26475

Merged
merged 1 commit into from Oct 25, 2016

Conversation

PVince81
Copy link
Contributor

Squashed backport of #26461 to stable9.

Retested, still works.

Please review @DeepDiver1975 @PhilippSchaffrath

Prevent newlines and zero byte chars to be used in files UI URL and
redirect to root if one is detected.

Added additional hardening in case the request fails with 400 or the
XMLHttpRequest throw a DOMException, both can happen with invalid paths
as well.
@PVince81 PVince81 added this to the 9.0.6 milestone Oct 25, 2016
@mention-bot
Copy link

@PVince81, thanks for your PR! By analyzing the history of the files in this pull request, we identified @butonic, @icewind1991 and @MorrisJobke to be potential reviewers.

@phisch
Copy link
Contributor

phisch commented Oct 25, 2016

👍

@PVince81 PVince81 merged commit 3519b6e into stable9 Oct 25, 2016
@PVince81 PVince81 deleted the stable9-filelist-catchinvalidchars branch October 25, 2016 13:30
@lock
Copy link

lock bot commented Aug 4, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Aug 4, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants